Explore the worlds best online cybersecurity training with OnDemand - view a Demo Today!


To attend this webcast, login to your SANS Account or create your Account.

Python Regular Expressions for the Win!

  • Friday, April 13th, 2018 at 3:30 PM EDT (19:30:00 UTC)
  • Joff Thyer
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!


As security professionals, we are put into the position of log file analysis countless times. Sometimes our log sources have inconsistencies, and formats that cannot be easily split apart using a delimiter based approach. Additionally, we often need to count and/or categorize specific data. Join me on a journey through constructing a Python regular expression to analyze a log source, and categorize the data using a Python dictionary.

Speaker Bio

Joff Thyer

Joff is a Senior Security Consultant, Researcher, and Penetration tester with Black Hills

Information Security. Joff has over 20 years of experience in the IT industry as an

enterprise network architect, network security defender, information security consultant,

and penetration tester.

Joff has experience with intrusion detection and prevention systems, vulnerability

analysis, penetration testing, engineering network infrastructure defense, and software

development. Joff is a certified SANS instructor for SEC573, has mentored SEC503,

and also taught mastering packet analysis.

Joff is also a co-host on the Security Weekly podcast, which features latest information

security news, research, interviews, and technical information.

Joff holds a B.Sc. in Mathematics, an M.Sc. in Computer Science, and GIAC penetration

testing certifications GPEN, GWAPT, and GXPN.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.